2005

Memory leak in the request_key_auth_destroy function in request_key_auth in Linux kernel 2.6.10 up to 2.6.13 allows loca

drm.c in Linux kernel 2.6.10 to 2.6.13 creates a debug file in sysfs with world-readable and world-writable permissions,

Linux 2.6.11 on 64-bit x86 (x86_64) platforms does not use a guard page for the 47-bit address page to protect against a

sysreport before 1.3.7 allows local users to obtain sensitive information via a symlink attack on a temporary directory.

The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4.1.0 through 4.1.36, as used in Hitachi Cosminexus Applicati

gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY envi

StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on

StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sens

cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used b

The (1) cfmailfilter and (2) cfcron.in files for cfengine 1.6.5 allow local users to overwrite arbitrary files via a sym

apachetop 0.12.5 and earlier, when running in debug mode, allows local users to create or append to arbitrary files via

The post-installation script for ntlmaps before 0.9.9 sets world-readable permissions for the configuration file, which

mpeg-tools before 1.5b-r2 creates multiple temporary files insecurely, which allows local users to overwrite arbitrary f

Race condition in ebtables netfilter module (ebtables.c) in Linux 2.6, when running on an SMP system that is operating u

The mprotect code (mprotect.c) in Linux 2.6 on Itanium IA64 Montecito processors does not properly maintain cache cohere

fs/exec.c in Linux 2.6, when one thread is tracing another thread that shares the same memory map, might allow local use

mm/ioremap.c in Linux 2.6 on 64-bit x86 systems allows local users to cause a denial of service or an information leak v

The HFS and HFS+ (hfsplus) modules in Linux 2.6 allow attackers to cause a denial of service (oops) by using hfsplus to

The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local

The "reset password" feature in Macromedia Breeze 5.0 stores passwords in plaintext in the database instead of the hash,

mt-comments.cgi in Movable Type before 3.2 allows attackers to redirect users to other web sites via URLs in comments.

Firefox 1.0.6 allows attackers to cause a denial of service (crash) via a Proxy Auto-Config (PAC) script that uses an ev

HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users t

xferfaxstats in HylaFax 4.2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the xf

Unspecified vulnerability in Unix File System (UFS) on Solaris 8 and 9, when logging is enabled, allows local users to c

The sys_set_mempolicy function in mempolicy.c in Linux kernel 2.6.x allows local users to cause a denial of service (ker

fopen_wrappers.c in PHP 4.4.0, and possibly other versions, does not properly restrict access to other directories when

Linux kernel 2.6.8 to 2.6.14-rc2 allows local users to cause a denial of service (kernel OOPS) via a userspace process t

Multiple vulnerabilities in Linux kernel before 2.6.13.2 allow local users to cause a denial of service (kernel OOPS fro

image.php in vBulletin 3.0.9 and earlier allows remote attackers with access to the administrator panel to upload arbitr

Opera before 8.50 allows remote attackers to spoof the content type of files via a filename with a trailing "." (dot), w

The MasterDataCD::createImage function in masterdatacd.cpp for SimpleCDR-X 1.3.3 creates the .temp temporary directory w

The sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a

masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file.

Unspecified vulnerability in the "tl" driver in Solaris 10 allows local users to cause a denial of service (panic) via u

bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on (1) the temporary

ncompress 4.2.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files usin

Unspecified vulnerability in the FTP Daemon (ftpd) for HP Tru64 UNIX 4.0F PK8 and other versions up to HP Tru64 UNIX 5.1

AuthInfo.java in LineContol Java Client (jlc) before 0.8.1 stores sensitive information such as user passwords in log fi

KillProcess 2.20 and earlier allows local users to bypass kill list restrictions by launching multiple processes at the

arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive

Advansysperu Software USB Lock Auto-Protect (AP) 1.5 uses a weak encryption scheme to encrypt passwords, which allows lo

The raw_sendmsg function in the Linux kernel 2.6 before 2.6.13.1 allows local users to cause a denial of service (change

The Linux kernel 2.6 before 2.6.12.1 allows local users to cause a denial of service (kernel panic) via a non group-lead

The ipt_recent kernel module (ipt_recent.c) in Linux kernel 2.6.12 and earlier does not properly perform certain time te

URBAN 1.5.3_1 allows local users to overwrite arbitrary files via a symlink attack on the (1) high score or (2) save gam

ZipTorrent 1.3.7.3 stores sensitive information in plaintext in the pref.txt file, which allows local users to obtain se

smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the (1) smb

silc daemon (silcd.c) in Secure Internet Live Conferencing (SILC) 1.0 and earlier allows local users to overwrite arbitr

Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, which allows local users to